Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File:                     Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier:          NJv0bb7EW8s/hlGmXsvi7/MxzU6V77cr9I4mhWuwmY0=
Subject key identifier:   51:FA:5D:EC:6C:90:3C:41:49:33:EF:11:C2:15:9B:E9:D7:42:82:3C
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer:       /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial:       01967DFC9E5524652F069984C44181E25565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number:          0B7E
Signing time:             Mon 28 Apr 2025 20:00:29 +0000
Manifest this update:     Mon 28 Apr 2025 20:00:29 +0000
Manifest next update:     Tue 29 Apr 2025 20:00:29 +0000
Files and hashes:         1: NwhX1fpUUKISwRaP6RgnnH_Cl-k.roa (hash: 46uueaf8TwY6xllVk4bGf8Po+XSFPtY1TUSEHJE8zWc=)
                          2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: D/7dU6ftAnjVgIv/NCbJbLm137QUdOw3X34XKm+iuWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:fc:9e:55:24:65:2f:06:99:84:c4:41:81:e2:55:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
        Validity
            Not Before: Apr 28 20:00:29 2025 GMT
            Not After : Apr 29 20:00:29 2025 GMT
        Subject: CN=51fa5dec6c903c414933ef11c2159be9d742823c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:0e:db:b3:aa:d3:23:e8:d8:71:60:4b:c1:
                    2f:4d:b5:98:6f:6a:6b:e7:48:0b:5f:b8:f0:7f:3b:
                    5d:1d:56:7f:24:99:23:f3:2d:2a:65:ad:9d:f0:a1:
                    2f:d2:ab:88:06:39:f7:0b:ff:9d:19:a9:2f:a6:18:
                    a4:46:4a:1e:cb:86:7f:0c:ac:e6:82:5f:c5:46:b7:
                    b1:c5:dc:bf:fb:bd:e1:b3:90:89:9e:ff:98:9c:7a:
                    39:97:a9:2b:94:de:b2:ba:a8:a6:c1:cd:ea:b9:8b:
                    12:12:e1:a4:58:4b:ea:ed:1d:c0:51:0e:7a:7d:3c:
                    97:ab:af:e6:e6:51:d7:b9:cb:73:40:ed:1d:b1:1b:
                    92:20:22:ce:3d:8a:d4:a8:01:1b:c9:1b:be:4d:68:
                    c7:95:a2:af:c0:0b:bd:48:b2:87:50:6e:b5:63:b9:
                    0c:78:bf:dc:73:89:60:fc:d9:a7:26:0f:08:fd:88:
                    58:a5:51:d6:48:5d:5e:a9:8d:88:0e:8a:c6:d8:eb:
                    2b:43:ad:c5:aa:ae:02:a3:1d:78:b5:cf:46:40:bd:
                    e0:69:72:c7:69:c8:a8:56:b2:24:70:06:ae:07:91:
                    1c:b2:a4:5e:87:29:8e:9c:87:96:90:1e:2e:55:60:
                    35:0d:33:fe:64:98:b8:01:bf:47:fb:5a:8e:de:d4:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FA:5D:EC:6C:90:3C:41:49:33:EF:11:C2:15:9B:E9:D7:42:82:3C
            X509v3 Authority Key Identifier:
                keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:79:f6:ef:7a:fb:d6:e9:c0:75:1b:2f:f6:88:59:a1:09:
         91:e6:59:0a:d4:94:a0:d3:d8:3a:73:78:19:9d:c9:f4:e2:45:
         10:43:05:9c:30:89:cf:aa:64:ac:13:7f:4d:f0:f0:a8:4d:0d:
         09:7b:47:c8:2f:ee:ff:41:ec:a6:09:4d:a3:d4:35:e1:e1:1b:
         da:62:5f:29:4b:d4:a0:d8:e4:1c:33:88:ad:4a:e8:e4:6e:60:
         00:51:03:8b:96:c9:0b:22:df:25:d0:58:a7:c1:c7:83:c9:5e:
         57:e6:c3:4b:ef:9f:2d:92:8e:9f:98:42:a7:04:fb:3d:8b:1e:
         5f:b2:30:fe:16:f2:e9:d6:f1:91:2e:21:67:62:6a:3b:c8:30:
         67:63:fe:4e:9b:0d:73:1b:82:30:cd:6c:4c:04:c6:64:34:ff:
         24:2e:46:41:ca:03:6c:4a:1a:95:98:18:2b:92:5d:c2:a8:a6:
         89:f7:3f:88:e5:5d:b2:f7:7f:c1:b4:8d:8a:e5:13:49:44:28:
         ec:15:4c:e2:a8:71:75:45:67:b6:f2:a9:a6:ee:a0:08:a8:c6:
         e2:26:c4:15:ed:69:aa:05:12:1f:47:98:bb:40:7f:16:2b:32:
         f1:f3:b7:e6:44:0e:7e:27:d6:6f:27:cc:15:d3:e1:7b:df:cd:
         90:e5:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:51:12 2025 by rpki-client